This policy is tailored for a U.S.-based accounting firm serving U.S. clients. It covers data collected via our
website, secure client portal and file uploads, contact forms, newsletter signups, and third-party analytics.
1. Information We Collect
A. Information You Provide Directly
Name, email address, and phone number
Company name and job title
Financial records or tax documentation (uploaded through our secure client portal)
Payment details (if applicable)
Message contents from our contact form or consultation requests
Newsletter signup details
B. Information Collected Automatically
When you visit BastaCPA.com, our systems and analytics tools (such as Google Analytics) may collect
IP address, browser type and operating system, pages viewed, time spent, referring URLs, and general location (city/state).
We use cookies and similar technologies to improve your experience, analyze website traffic, and optimize content.
C. Information from Third-Party Services
We integrate with third-party platforms to deliver services securely, including QuickBooks Online, Xero, or Gusto (for
bookkeeping and payroll), Karbon (for communication and data management), and email marketing tools newsletters. Each third party maintains its own privacy policy and practices.
2. How We Use Your Information
Provide accounting, tax, and advisory services
Manage secure document uploads and client portal access
Respond to inquiries and schedule consultations
Send updates, newsletters, and educational content (with your consent)
Improve website performance and security
Comply with legal and regulatory obligations
We do not sell or rent your personal information.
No mobile information will be shared with third parties/affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
3. Data Security
SSL encryption across the website and client portal
Secure cloud storage with restricted employee access
Two-factor authentication for staff accessing client files
Regular system audits and data backups
While we follow industry best practices, no system can guarantee absolute security. You share data at your discretion,
understanding these inherent limitations.
4. Cookies and Tracking Technologies
We use cookies and analytics to remember preferences, analyze traffic, and improve user experience. You can modify or
disable cookies in your browser; some features may not function properly without them.
5. Data Retention
We retain client and communication records only as long as necessary to provide services, satisfy tax and legal
recordkeeping obligations, and resolve disputes. When data is no longer needed, it is securely deleted or anonymized.
6. Data Sharing
Trusted service providers (hosting, analytics, file storage, accounting software)
Professional partners or subcontractors assisting with engagements, bound by confidentiality
Legal authorities when required by law or in response to valid legal requests
All sharing is limited to what is necessary to perform our professional services.
7. Your Privacy Rights (U.S. Clients)
Depending on your state, you may have rights under laws such as the California Consumer Privacy Act (CCPA/CPRA),
including the right to access, correct, or delete your personal information and opt out of marketing communications.
We may verify your identity before fulfilling certain requests.
To exercise your rights, email us at iSupport@bastacpa.com.
8. Email and Newsletter Communications
If you subscribe to our newsletter, we collect your name and email address to send updates, resources, and occasional
promotions. You may unsubscribe at any time using the link at the bottom of each email. We do not share or sell
subscriber lists.
9. Links to Third-Party Websites
Our site may link to third-party websites or services (e.g., payment processors, client login portals). We are not
responsible for their content or privacy practices. Please review their policies before submitting personal information.
10. Children’s Privacy
Our website and services are not directed to children under 18, and we do not knowingly collect data from minors. If we
become aware of such data, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy periodically. The latest version will always be available on this page with the
effective date shown at the top.
